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THE CLAIMS: 

1 (currently amended). A method for providing authentication or 
identification services to a first user regarding a second user, the method 
comprising: 

establishing a telephone call between the first user and the second user 
through a media gateway; 

detecting a voice command from the first eaHe* user during the 
telephone call; 

requesting a certificate corresponding to the second user from an 
authentication sener in icsponse to the x osce command. 

returning the certificate coirespondmg to the second uses. 

a questing anthem icatf on of the ceitnieate an responding to the second 
user irom a cents ol psogtam associated with the second usei, 

returning an authentication cestihcate from the contiol piogiam 
associate d w tth the s*. cond usei and 

\enfr ing authentication b\ comparing the authentication certificate 
c<vne<- ponding to the second usei and iecen ed fiom the omtioi piosiam 
associated with the second user with the certificate received from the 
authenticate on server. 

2 (ongmaf ) The method according to claim 1 , uheiem the Arsi user 

communicates with the second usei thiough a media gatewa\ 
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3 (original). The method according to claim L further comprising 
monitoring the communication between the first user and the second user so 
that the authentication server may notify the first user if the second user 
changes or becomes untrustworthy. 

4 (original). T he method according to claim I . u herem the requesting of the 
certificate corresponding to the second user hom the authentication senei. 
requesting authentication of the certificate corresponding to the second user 
and the \erifi ing authentication is performed h> a control program associated 
with the first user. 

5 (original) The method according to claim ! . wherem the first and set. on d 
users are using chem de\ ices configured to communicate with each other and 
with the authentication sener 

6 (original). The method according to claim 5. wherein the client devices 
are smart phones. 

~> (ongina!) Fhe method aeeoidtng to claim I wheiem the authentication 
■>ci\ei has authenticated an omani/ation ami the .>et.ond usei is a memhei of 
the authenticated organization 
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S (Oti>;jtiai) t he method acceding Jo claim ! xx herein xenfx ing 
authentication determines a lex el ol tuist between the fust u<-ei the 
authentication setxei and the second met 

') (oiivim.il) The method according to claun u hetein the lex el ot ttust is a 
xalue cos responding to the piobabihtx that the authentication ceriiiicate 
cotiespondmiJ to the second uses and received liom the control proyiam 
associated xxith the second uso is the same as the cettificate jecejxed fiom the 
authentication server. 

10 (original). The method according to claim 1, wherein the authentication 
certificate corresponding to the second user and received from the control 
program associated with the second user includes a portion indicating the 
second user's identity. 

.1 .1 (previously amended). A system for facilitating authentication services 
comprising: 

an authentication senet conlk'tued to psoxide an authentication 

c<. i Idicaso to a usei of a fust cheni dex ice for authentication oi identification 

of a user of a second diem device, the first and second client devices heiny 

confirmed to communicate with each othet and the authentication serxei. each 

of the fltst and second client de\ ices including a usei conuol ptogram 

configured to communicate data to and irom the authentication setxer. and a 
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media gateway coupled to the authentication server and enabling 
communication of media data from the first and second client devices to the 
an then rs ca ti on server, 

wherein, the user control program of the first client device, in response 
to a voice command of the first user requesting authentication of the second 
user, is configured to receive a certificate corresponding to the user of the 
second client device and the authentication certificate from the authentication 
server and being configured to authenticate the user of the second client 
device by comparing the certificate corresponding to the second client device 
and the authentication certificate. 

12 (original). The system according to claim 1 L wherein the authentication 
server is configured to monitor the communication between the .first user and 

the second user. 

l.i (ongmal) fhe s\ stem accoidmg So claim \ \ wheiew the au shon tic at ton 
server fs configured to continuous!) momtoi ths? communication between the 
first uses and the second usei so as to noui\ the fisst \t<-ci il the second uses 
changes os becomes untiusfwoisl-^ 

14 (original) The method according to claim ! L wherein the control 
prog tarn associated unh ihe ttist user is coniiguicd to request the certificate 
couespondmg to the second uses ftom the authentication senei, tequest 
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authentication of the certificate corresponding to the second user and verify 
authentication. 

1 5 (previously amended). The system according to claim 1 1 , wherein the 
first and second users use client devices configured to communicate with each 
other and with the authentication server. 

1.6 (original). The sy stem according to claim 1 5, wherein the client devices 
are smart phones. 

I 7 (ougmai > '1 he sssiem aecotding to claim 1 1. whet em the authentication 
server has authenticated an oiyam/ation and ihe .second usei is a membei oi 
the authenticated oiiuuuAitum 

18 tmiumah The s\ siem aceoidmg to claim i4. wherein \ersi\ tny 
authentication determines a level of trust between the first uset the 
authentication sen or and the second user 

1° (oiH.'inal) fhes\ stern accoidms; to claim is wheiem the k*\cl ol trust is 
a value cones pond my u* ihe prohahtlm that the authentication eetuiieate 
cone*, ponding to the second u.->ct and iet.cn ed from the contioi piety am 
associated with the second user fs the same as the certificate received from the 
authenticate on server. 
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20 (original). The system according to claim 1 1 , wherein the authentication 
certificate corresponding to the second user and received from the control 
program associated with the second user includes a portion indicating the 
second user's identity, 

21-47 (cancelled). 
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